This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
File:                     F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json)
Hash identifier:          lArfSd+tKKvNeIFsiJxi2pS1Dy2nkslitkeIqtstoU8=
Subject key identifier:   71:FA:BD:2B:D3:3A:33:C1:D1:A1:6F:4C:1B:AE:13:3F:00:34:59:DA
Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84
Certificate issuer:       /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
Certificate serial:       7B088D7DE7232A6B7738481CE3A2BEB9C9B2AD3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
Manifest number:          01D4
Signing time:             Sat 06 Dec 2025 02:50:56 +0000
Manifest this update:     Sat 06 Dec 2025 02:45:56 +0000
Manifest next update:     Tue 09 Dec 2025 12:21:56 +0000
Files and hashes:         1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: /pxw+GQ2Y9XflTZiVCJW+6r6jI0Pb6lMeYivjcuLcC8=)
                          2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl
                          rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 12:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:8d:7d:e7:23:2a:6b:77:38:48:1c:e3:a2:be:b9:c9:b2:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884
        Validity
            Not Before: Dec  6 02:45:56 2025 GMT
            Not After : Dec  9 12:21:56 2025 GMT
        Subject: CN=71FABD2BD33A33C1D1A16F4C1BAE133F003459DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:07:2f:5a:86:49:b2:ad:e3:c9:57:53:45:
                    e6:3c:b8:0e:7f:00:79:e6:91:4e:e9:9a:3a:5a:98:
                    1e:ea:24:fe:50:12:8b:af:d4:75:ae:ad:3f:fb:ac:
                    97:30:e2:f6:1e:93:56:30:68:0b:49:ee:3e:a8:80:
                    74:ef:5f:e4:ea:4a:08:8d:1e:2c:d4:5c:de:2b:ec:
                    30:41:12:96:ac:7f:1f:40:87:12:44:ea:d9:0b:4c:
                    65:19:5f:e1:f4:47:89:0d:5e:b7:89:c4:61:63:f3:
                    d8:61:00:7f:67:6a:f4:58:18:15:9a:19:15:bd:a3:
                    3f:c2:01:68:20:a5:da:97:8c:e5:66:7a:64:81:10:
                    48:ed:2a:58:7e:61:8e:32:8a:bd:90:f9:12:96:ec:
                    22:03:1d:92:34:5b:4f:49:43:f3:6c:e4:f3:2b:67:
                    c9:38:5f:41:8a:b4:fa:1f:d5:c4:4f:76:22:33:1d:
                    c2:32:e2:e4:c1:7b:4d:1f:d3:8b:78:85:66:d9:58:
                    ee:84:59:98:3f:bd:2d:0c:c8:1b:9b:ae:6f:a6:fd:
                    35:4b:fa:e7:55:bc:3d:b6:14:a7:4e:83:49:b6:dd:
                    5d:c7:6e:0d:46:b3:d9:65:8f:5d:fc:92:45:03:9e:
                    51:3d:79:88:01:9d:b6:ff:bc:97:81:3d:f2:29:07:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FA:BD:2B:D3:3A:33:C1:D1:A1:6F:4C:1B:AE:13:3F:00:34:59:DA
            X509v3 Authority Key Identifier:
                keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:4e:1f:35:e5:99:97:89:6c:ef:b8:f1:02:36:2d:75:df:
         59:58:aa:7f:3d:ae:a7:3c:6d:96:02:3d:08:eb:ea:ab:f0:68:
         e4:82:23:12:a2:be:68:fc:af:13:35:a3:d2:bd:72:4a:a0:d7:
         fc:95:a9:43:8a:54:7e:dc:49:2e:4b:7c:7a:58:2e:f8:e8:fe:
         d0:d4:0b:35:ec:f1:70:66:cf:90:09:89:ee:5c:89:5f:2f:d8:
         92:76:d1:74:c4:b4:c2:f6:e0:03:76:0c:af:71:ae:a4:48:ee:
         02:b9:c5:65:9f:a8:69:16:1f:1b:f7:3b:08:3e:d4:86:5d:c7:
         75:b6:ae:37:54:2d:8f:ac:93:78:0e:d0:f8:bf:46:4c:ef:c3:
         88:fa:ea:68:4e:47:9f:30:31:ca:98:21:76:74:5c:f4:55:44:
         8c:22:1b:27:3c:1e:87:4c:e5:bf:dc:c1:d0:51:de:bc:8b:d5:
         05:d9:d3:cb:31:51:25:11:0d:0e:8a:fc:1d:a9:1e:da:77:6c:
         89:b0:bb:a4:5a:1b:8b:b2:11:ed:5a:99:4b:62:53:ac:9d:c8:
         50:dc:fd:b1:41:cc:7b:15:b8:bb:0d:64:83:77:d3:b3:92:6d:
         5a:63:db:b4:6d:03:dc:57:bc:aa:ad:cb:4b:6b:f6:ec:08:84:
         9f:65:a5:e7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUewiNfecjKmt3OEgc46K+ucmyrT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz
OTFBQjg4NDAeFw0yNTEyMDYwMjQ1NTZaFw0yNTEyMDkxMjIxNTZaMDMxMTAvBgNV
BAMTKDcxRkFCRDJCRDMzQTMzQzFEMUExNkY0QzFCQUUxMzNGMDAzNDU5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJwcvWoZJsq3jyVdTReY8uA5/
AHnmkU7pmjpamB7qJP5QEouv1HWurT/7rJcw4vYek1YwaAtJ7j6ogHTvX+TqSgiN
HizUXN4r7DBBEpasfx9AhxJE6tkLTGUZX+H0R4kNXreJxGFj89hhAH9navRYGBWa
GRW9oz/CAWggpdqXjOVmemSBEEjtKlh+YY4yir2Q+RKW7CIDHZI0W09JQ/Ns5PMr
Z8k4X0GKtPof1cRPdiIzHcIy4uTBe00f04t4hWbZWO6EWZg/vS0MyBubrm+m/TVL
+udVvD22FKdOg0m23V3Hbg1Gs9llj138kkUDnlE9eYgBnbb/vJeBPfIpB8WRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcfq9K9M6M8HRoW9MG64TPwA0WdowHwYDVR0j
BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz
NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB
Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx
NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5
MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAINPTh815ZmXiWzvuPECNi1131lYqn89rqc8
bZYCPQjr6qvwaOSCIxKivmj8rxM1o9K9ckqg1/yVqUOKVH7cSS5LfHpYLvjo/tDU
CzXs8XBmz5AJie5ciV8v2JJ20XTEtML24AN2DK9xrqRI7gK5xWWfqGkWHxv3Owg+
1IZdx3W2rjdULY+sk3gO0Pi/Rkzvw4j66mhOR58wMcqYIXZ0XPRVRIwiGyc8HodM
5b/cwdBR3ryL1QXZ08sxUSURDQ6K/B2pHtp3bImwu6RaG4uyEe1amUtiU6ydyFDc
/bFBzHsVuLsNZIN307OSbVpj27RtA9xXvKqty0tr9uwIhJ9lpec=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:00 2025 by rpki-client